Re: sudo and su support
"Doug Nordwall" <[email protected]>
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Message-ID | <[email protected]> |
ya, in my own case, I'll probably end up running a full scan on a box where I have sudo on everything and log what commands it needs, then go back and make a sudo config for those boxes, rather than use the su option. fortunately, it's largely a non-issue for us... I can work around it :) It was mostly a question to see if it was in the path or not, as I could actually see a use for it. On Tue, May 27, 2008 at 2:53 AM, Jason Haar <[email protected]> wrote: > Doug Nordwall wrote: > > In my own case, there are a fair number of machine that we have where > > we have a UID 0 account for our access that is a separate account from > > root, and we don't have "root" :) I realize that this is not a common > > configuration, so I was asking. > > We are in a similar state. Some machines are still out of bounds to me > because of the requirement for root access - the business/application > owner just doesn't want to be giving away root access to anyone more > than is needed. A "sudo" shell option for an unprivileged account would > work wonders. Via /etc/suoders, they'd be able to "give away root" for > just the commands needed by Nessus - and not one drop of blood more :-) > > > > -- > Cheers > > Jason Haar > Information Security Manager, Trimble Navigation Ltd. > Phone: +64 3 9635 377 Fax: +64 3 9635 417 > PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 > > _______________________________________________ > Nessus mailing list > [email protected] > http://mail.nessus.org/mailman/listinfo/nessus > -- Doug Nordwall Unix, Network, and Security Administrator You mean the vision is subject to low subscription rates?!!? - Scott Stone, on MMORPGs _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus